IN THE CLAIMS: 

Please amend claims 1, 7, 13, 15, 16, 21, 27, and 29, and cancel claims 2-4, 8- 
12, 14, 17, 18, 22-26, 28, and 31-34 as follows: 

1 . (Currently Amended) A method of creating a strong pass phrase, the 
method comprising: 

obtaining a plurality of questions and a plurality of answers corresponding to the 
plurality of questions; [[and]] 

combining the plurality of answers into a single pass phrase, wherein the plurality 
of answers are concatenated together with a fixed random value and a cryptographic 
hash function is applied to the concatenation to create a hashed answer: 

storing the hashed answer on a remote server without storing the plurality of 
answers on the remote server: and 

obtaining a retrieval question and a retrieval answer, the retrieval answer being 
used to display the plurality of questions. 

2. (Canceled) 

3. (Canceled) 

4. (Canceled) 

5. (Original) The method of claim 1 , wherein the plurality of questions are 
obtained by displaying a plurality of partial questions and obtaining completions to said 
plurality of partial questions. 

6. (Original) The method of claim 1 , wherein the pass phrase is used to 
wrap data to be stored in a remote server. 

7. (Currently Amended) A method of providing a pass phrase at a client 
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workstation, the method comprising: 

displaying a plurality of entfies fields f or entering a plurality of pass phrase 
answers , a field for entering a retrieval answer the retrieval answer being used to 
retrieve a plurality of guestions the answers to which are the plurality of pass phrase 
answers, and a field for reouesting a retrieval guestion, the answer to which is the 
retrieval answer ; 

displaying the retrieval guestion if the field for reguesting the retrieval guestion is 
marked; 

displaying the plurality of guestions if the field for entering the retrieval answer is 
filled with the retrieval answer; and 

combining the plurality of pass phrase answers into a single pass phrase, 
wherein the plurality of pass phrase answers are concatenated together with a fixed 
random value and a cryptographic hash function is applied to the concatenation. 

8. (Canceled) 

9. (Canceled) 

10. (Canceled) 

1 1 . (Canceled) 

12. (Canceled) 

1 3. (Currently Amended) The method of claim 42 7, wherein a user 
having regist e r e d th e s e t of r e tri e va l quest i ons is notified if anyone asks for the s e t of 
r e tr ie va l gu e stions retrieval question . 

14. (Canceled) 

1 5. (Currently Amended) A computer readable medium for use in 
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conjunction with a client workstation and a server for creating a strong pass phrase, the 
computer readable medium including computer readable instructions encoded thereon 
for: 

obtaining a plurality of questions and a plurality of answers corresponding to the 
plurality of questions; and 

combining the plurality of answers into a single pass phrase, wherein the plurality 
of answers are concatenated together with a fixed random value and a cryptographic 
hash function is applied to the concatenation to create a hashed answer; 

storing the hashed answer on a remote server without storing the plurality of 
answers on the remote server; and 

obtaining a retrieval guestion and a retrieval answer the retrieval answer being 
used to display the plurality of guestions. 

16. (Currently Amended) The computer readable medium of claim 15, 
further including computer readable instructions encoded thereon for compr i s i ng 
transmitting the plurality of questions to a remote server. 

17. (Canceled) 

18. (Canceled) 

19. (Original) The computer readable medium of claim 15, wherein the 
plurality of questions are obtained by displaying a plurality of partial questions and 
obtaining completions to said plurality of partial questions. 

20. (Original) The computer readable medium of claim 15, wherein the 
pass phrase is used to wrap data to be stored in a remote server. 
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21 . (Currently Amended) A computer readable medium for use in 
conjunction with a client workstation for providing a pass phrase at a client workstation, 
the computer readable medium including computer readable instructions encoded 
thereon for: 

displaying a plurality of e ntr ie s fields for entering a plurality of pass phrase 
answers , a field for entering a retrieval answer, the retrieval answer being used to 
retrieve a plurality of questions the answers to which are the plurality of pass phrase 
answers, and a field for requesting a retrieval question, the answer to which is the 
retrieval answer ; 

displaying the retrieval question if the field for requesting the retrieval question is 
marked; 

displaying the plurality of questions if the field for entering the retrieval answer is 
filled with the retrieval answer; and 

combining the plurality of pass phrase answers into a single pass phrase, 
wherein the plurality of pass phrase answers are concatenated together with a fixed 
random value and a cryptographic hash function is applied to the concatenation. 

22 - 26 (Canceled) 

27. (Currently Amended) The computer readable medium of claim 2§ 
21, wherein a user having registered the set of retrieval questions is notified if anyone 
asks for the set of retrieval questions. 

28. (Canceled) 
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29. (Currently Amended) A client workstation comprising: 
a processor; 

a display connected to the processor; 

a computer memory connected to the processor, the computer memory 
including: 

a viewing program for rendering information received from a server on the 
display, the display displaying a plurality of entries fields for entering a plurality of 
pass phrase answers and an option for requesting a plurality of pass phrase 
questions corresponding to the plurality of the pass phrase of answers, and 

a client program for combining the pass phrase answers to form a single 
pass phrase, 

wherein if the option for requesting the set of the pass phrase questions is 
chosen, an e ntry a field f or entering a retrieval answer and an option for requesting a 
retrieval question corresponding to the retrieval answer is displayed. 

30. (Original) The client workstation of claim 29, wherein if the option for 
requesting the retrieval question is chosen, a request is formed and transmitted to the 
server, which authenticates the request and returns the retrieval question for display if 
authentication is successful, and if the retrieval answer is entered immediately or 
entered after the retrieval question is displayed, the validity of the retrieval answer is 
determined, and if the retrieval answer is determined to be valid, the pass phrase 
questions are displayed. 

31-34 (Canceled) 
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